CVE Vulnerabilities

CVE-2023-21736

Incorrect Conversion between Numeric Types

Published: Jan 10, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Office Visio Remote Code Execution Vulnerability

Weakness

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Affected Software

Name Vendor Start Version End Version
365_apps Microsoft - (including) - (including)
Office Microsoft 2019 (including) 2019 (including)
Office_long_term_servicing_channel Microsoft 2021 (including) 2021 (including)
Visio Microsoft 2013-sp1 (including) 2013-sp1 (including)
Visio Microsoft 2016 (including) 2016 (including)

Potential Mitigations

References